GHSA-g84f-cmc8-682cMediumCVSS 4.3

Password parameter default values exposed by Jenkins Pipeline: Build Step Plugin

Published
February 16, 2022
Last Modified
February 3, 2023

🔗 CVE IDs covered (1)

📋 Description

Jenkins Pipeline: Build Step Plugin 2.15 and earlier reveals password parameter default values when generating a pipeline script using the Pipeline Snippet Generator, allowing attackers with Item/Read permission to retrieve the default password parameter value from jobs.

🎯 Affected products1

  • maven/org.jenkins-ci.plugins:pipeline-build-step:< 2.15.1

🔗 References (4)